Obligations of relying parties following the completion of the identity matching process
Article 5
1. Where an identity matching process as set out in Article 2 is completed, whether successfully or unsuccessfully, the relying party or the party acting on its behalf or the register relied upon by the relying party shall keep the logs relating to the identity matching process and its outcome, including where available, the following: (a) the values provided by the user and the relying party that is used to perform the identity matching process; (b) the date and time of the identity matching process; (c) any relevant documentation provided as part of the complementary methods referred to in Article 4(1) and (2) necessary for dispute handling; (d) where applicable, any identifiers or account numbers used by the relying party, or a register relied upon by relying parties, or the party acting on its behalf, or the centralised identity matching system that relates to the natural person. 2. Relying parties or the parties acting on their behalf, shall consider security and privacy by design principles related to the logging of the information included in paragraph 1. 3. Relying parties or the parties acting on their behalf, shall retain the logs for a minimum of 6 months and a maximum of 12 months for security purposes. For other purposes, including enabling the registration and processing of user complaints, the retention time may be extended if required by Union or national law.